Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b772a5e2-149c-3790-9de1-f070716b9611.roa
File:                     b772a5e2-149c-3790-9de1-f070716b9611.roa (raw, json)
Hash identifier:          ELtKdWat3iK78GK/B9ipDv9SEwtvHMNJMf/CU3jKZ0g=
Subject key identifier:   C1:CC:BA:5B:4B:AD:2F:F9:BE:69:55:C3:0E:DE:32:EA:5D:AF:27:10
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D15435DDE9D3DEE7C92680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b772a5e2-149c-3790-9de1-f070716b9611.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        98.8.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:54:35:dd:e9:d3:de:e7:c9:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ba28235e-83e4-40ad-8596-9f98ffca4145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:c5:51:44:e8:84:e9:e3:7a:84:62:10:09:
                    e6:58:11:3d:36:92:64:2d:c7:91:32:a6:0c:a8:cf:
                    dd:af:e3:29:c6:f1:15:d3:b3:93:b4:5d:bc:b8:9f:
                    6a:88:65:af:d1:ed:c9:06:b1:c0:50:22:61:01:1d:
                    7a:34:7e:70:b1:bb:55:4b:8b:70:ac:78:b1:72:d5:
                    5a:79:04:68:47:e4:f6:86:ea:3d:a0:f7:4a:70:7d:
                    93:d4:b9:0c:6b:aa:8e:a6:15:7f:ab:2b:df:a3:dc:
                    e2:db:51:18:0e:9a:5c:13:3c:07:e7:8b:7b:85:2b:
                    a0:89:b6:73:e4:39:74:17:32:24:50:d0:02:6f:d0:
                    33:7b:99:67:9d:56:8a:c8:1e:5f:c7:eb:76:90:f7:
                    c5:19:ba:1f:c4:9d:6b:c9:f0:73:95:17:16:92:c9:
                    c2:ff:3b:4b:16:cc:c6:04:bd:93:a0:4e:65:11:6c:
                    38:63:88:47:0a:f1:66:7d:ac:d4:16:4e:0c:dd:f0:
                    6c:3d:e1:76:88:de:a1:d0:ec:ef:bf:a6:ff:e0:9f:
                    82:e8:d4:52:f0:aa:9d:e1:e2:37:7e:73:46:ca:43:
                    d7:5c:b7:00:35:de:7c:f1:7b:c4:6b:80:20:5b:f1:
                    c7:67:88:bc:69:b9:00:9f:8d:76:f6:ea:a5:13:57:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CC:BA:5B:4B:AD:2F:F9:BE:69:55:C3:0E:DE:32:EA:5D:AF:27:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b772a5e2-149c-3790-9de1-f070716b9611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:05:2c:b7:31:8b:f0:82:06:8f:f6:b2:c2:ff:66:ff:21:8f:
         5f:97:29:62:e5:c4:70:e0:9d:da:c1:0d:44:8e:3b:ca:69:c3:
         b4:8d:6c:84:58:66:09:8b:4d:5e:49:b4:f5:88:e4:2d:3f:0c:
         64:7d:11:c3:90:71:e1:5a:50:59:de:e1:e7:8c:e6:22:d1:4c:
         bb:8b:85:8d:41:b8:ce:2f:54:09:ab:60:aa:db:5f:ee:89:1d:
         a6:96:5d:fd:20:f6:60:79:91:4a:d6:a5:8a:03:62:d8:db:df:
         14:15:cb:cb:6f:4f:d2:a0:51:51:f4:3b:f9:bb:64:c8:48:f8:
         11:78:38:de:64:43:5f:1d:68:91:2d:85:b8:fb:94:1b:47:76:
         99:75:76:98:70:ea:f2:6b:a6:5c:33:5a:6c:2e:fc:9f:31:97:
         71:c4:dc:f6:c6:6f:72:81:00:57:1f:d5:e0:ca:00:44:3f:32:
         69:67:d1:95:c7:40:34:3a:5b:6e:86:36:00:0c:42:ae:e6:b3:
         81:cf:d1:15:59:f3:b7:39:12:f1:69:4b:52:88:9c:ad:1a:0a:
         e2:b9:7e:eb:b2:cf:07:35:2a:ec:95:8d:d2:49:1c:1f:a4:35:
         42:72:d0:de:f7:b2:d3:67:8f:68:43:47:bf:47:46:50:f8:3f:
         81:cb:87:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0VQ13enT3ufJJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YmEyODIzNWUtODNlNC00MGFkLTg1OTYtOWY5OGZmY2E0MTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nzFUUTohOnjeoRiEAnmWBE9NpJkLceRMqYM
qM/dr+MpxvEV07OTtF28uJ9qiGWv0e3JBrHAUCJhAR16NH5wsbtVS4twrHixctVa
eQRoR+T2huo9oPdKcH2T1LkMa6qOphV/qyvfo9zi21EYDppcEzwH54t7hSugibZz
5Dl0FzIkUNACb9Aze5lnnVaKyB5fx+t2kPfFGbofxJ1ryfBzlRcWksnC/ztLFszG
BL2ToE5lEWw4Y4hHCvFmfazUFk4M3fBsPeF2iN6h0Ozvv6b/4J+C6NRS8Kqd4eI3
fnNGykPXXLcANd588XvEa4AgW/HHZ4i8abkAn4129uqlE1e5rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHMultLrS/5vmlVww7eMupdrycQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjc3MmE1ZTItMTQ5Yy0z
NzkwLTlkZTEtZjA3MDcxNmI5NjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYggKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMFLLcxi/CCBo/2ssL/Zv8hj1+XKWLlxHDgndrBDUSOO8ppw7SNbIRY
ZgmLTV5JtPWI5C0/DGR9EcOQceFaUFne4eeM5iLRTLuLhY1BuM4vVAmrYKrbX+6J
HaaWXf0g9mB5kUrWpYoDYtjb3xQVy8tvT9KgUVH0O/m7ZMhI+BF4ON5kQ18daJEt
hbj7lBtHdpl1dphw6vJrplwzWmwu/J8xl3HE3PbGb3KBAFcf1eDKAEQ/Mmln0ZXH
QDQ6W26GNgAMQq7ms4HP0RVZ87c5EvFpS1KInK0aCuK5fuuyzwc1KuyVjdJJHB+k
NUJy0N73stNnj2hDR79HRlD4P4HLh64=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:48:56 2025 by rpki-client